Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
File: 0jhr7YO2RaK64TifU9llfZGedtE.mft (raw, json)
Hash identifier: eXhGNZmy9Rd04tYO9mMN41b5Nyr0ZX/R1fj+vjgkaSE=
Subject key identifier: B6:3D:1D:06:40:CE:CD:CE:02:22:DF:EF:D2:C0:3D:75:52:E2:89:30
Authority key identifier: D2:38:6B:ED:83:B6:45:A2:BA:E1:38:9F:53:D9:65:7D:91:9E:76:D1
Certificate issuer: /CN=d2386bed83b645a2bae1389f53d9657d919e76d1
Certificate serial: 019F90FF4116C42728B397CD62E29293EC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
Manifest number: 0D8B
Signing time: Thu 23 Jul 2026 22:01:15 +0000
Manifest this update: Thu 23 Jul 2026 22:01:15 +0000
Manifest next update: Fri 24 Jul 2026 22:01:15 +0000
Files and hashes: 1: 0jhr7YO2RaK64TifU9llfZGedtE.crl (hash: ifIdolV25ErqME1NJ6Qrv1M4KaHjJxX0nL48j2AvFYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:41:16:c4:27:28:b3:97:cd:62:e2:92:93:ec:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2386bed83b645a2bae1389f53d9657d919e76d1
Validity
Not Before: Jul 23 22:01:15 2026 GMT
Not After : Jul 24 22:01:15 2026 GMT
Subject: CN=b63d1d0640cecdce0222dfefd2c03d7552e28930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:63:60:5c:47:7a:d7:40:d9:de:36:e9:56:
fa:8e:73:08:62:77:d2:43:a8:67:2c:93:eb:c8:cd:
6d:b3:88:88:ee:d3:cb:84:bc:21:8d:04:88:b7:89:
0c:03:d4:a3:e5:ef:7a:cf:c6:85:99:e9:d2:fa:c6:
21:cf:d8:6b:92:5d:b6:36:fa:74:8e:8d:ec:d8:51:
e1:2c:ed:a7:14:72:dd:c7:43:98:b8:00:19:ed:4b:
7a:39:7b:55:40:f7:c0:22:27:b6:e4:69:45:b4:39:
ff:c2:0f:2e:19:d8:cd:5d:6d:0b:a1:c8:2d:95:c6:
75:f4:f1:de:dd:20:c0:64:db:48:cb:0b:e6:e2:91:
76:f1:91:d3:6d:eb:4f:3d:ce:d4:18:31:07:ce:3e:
34:06:e9:bd:08:aa:91:5b:1f:60:10:97:08:c4:c0:
4e:eb:52:d0:91:4a:5d:62:f3:52:1c:97:0e:47:7f:
6e:4e:19:03:80:95:09:cb:1a:62:54:ca:1c:a0:68:
8f:84:06:30:2c:b7:98:81:07:4b:04:44:2c:79:8a:
53:57:85:e5:23:f9:cb:8d:44:ed:30:bb:16:20:e2:
e2:9b:14:dc:e1:1f:86:0f:d9:f3:6e:67:01:d6:7c:
dd:95:7b:4f:02:a1:4a:7d:19:74:ae:ec:54:47:f2:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3D:1D:06:40:CE:CD:CE:02:22:DF:EF:D2:C0:3D:75:52:E2:89:30
X509v3 Authority Key Identifier:
keyid:D2:38:6B:ED:83:B6:45:A2:BA:E1:38:9F:53:D9:65:7D:91:9E:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:84:f2:11:0c:ce:a8:6b:23:ba:a3:2d:7e:2f:80:9a:15:37:
25:eb:d5:f5:7e:d0:15:83:3a:43:2c:50:ff:3e:ee:1b:d9:bb:
60:c6:b0:ed:f0:17:70:5c:ea:82:52:f2:24:7a:a6:98:7b:b6:
05:f9:9d:bd:5c:55:0a:f6:35:f1:8e:17:19:09:1c:93:ca:0c:
e4:b4:1b:1d:0a:ee:b6:a1:af:0f:89:53:a1:9e:28:24:07:39:
de:27:ee:65:52:a4:70:52:6c:ef:8a:ad:09:73:47:c1:e7:b3:
13:89:b1:83:80:9e:39:02:2b:31:c8:be:5f:13:2c:e6:bf:07:
fb:0b:70:5b:d0:fa:24:ee:13:16:92:0b:e1:71:d1:fc:8f:d3:
d9:c3:8f:ea:72:6b:43:ce:5a:8b:d4:f4:7c:65:0f:65:e8:74:
35:f3:84:fa:47:cc:e2:61:30:b3:2f:b5:03:02:76:3b:29:aa:
2c:68:0f:30:7d:04:e4:f9:3f:83:72:cd:9f:50:14:2c:d9:40:
4e:4b:ce:27:de:de:1d:60:a7:5f:42:c3:a6:2b:38:d7:2d:66:
f1:13:ae:a3:6a:75:39:ff:d8:61:4e:99:3c:43:1a:96:ed:48:
2a:d8:21:42:96:17:81:71:1c:df:0a:fc:17:27:ec:09:cc:1a:
ee:4f:66:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:16:44 2026 by rpki-client